$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft File: dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json) Hash identifier: 3rnpO5YbiTvqzdcIzEjURZSvJ+fMrVfmcZJ/z4b8MJI= Subject key identifier: 7A:45:2B:BE:43:AF:EB:81:E0:AC:A7:2C:A9:78:2A:08:32:C9:5B:F5 Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 Certificate issuer: /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft Manifest number: 067D Signing time: Thu 18 Sep 2025 22:42:22 +0000 Manifest this update: Thu 18 Sep 2025 22:42:21 +0000 Manifest next update: Thu 25 Sep 2025 22:42:21 +0000 Files and hashes: 1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: BKCigfuOhoRTwav+F1TpOwowivBbfzLE2DT4al7Gp9k=) 2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: RjXIFOb4H/X8iiDE4pTuFeof6IEbmr1b61kbIaDDvIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28 Validity Not Before: Sep 18 22:42:21 2025 GMT Not After : Sep 25 22:42:21 2025 GMT Subject: CN=68cc8acd-242c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:19:b7:33:a6:31:04:0f:3f:4c:15:20:a9:ef: f4:9f:14:67:66:38:aa:e5:ec:f2:f9:1a:14:6d:2a: ef:6a:7d:15:35:85:aa:43:64:7f:01:5d:11:2a:b2: 93:4e:aa:b2:75:ce:c1:66:c7:0f:75:cf:41:12:b7: 1b:0b:a2:70:5c:61:5b:4e:d0:ec:77:b7:76:05:63: 93:4f:97:c5:16:2a:d9:98:ea:0a:66:d4:9e:85:44: 0d:87:45:e8:2e:a3:af:9d:53:ec:7f:bb:f4:06:74: 3b:51:bb:f9:94:28:80:29:12:9f:46:d8:56:5c:8f: 06:87:bf:ba:88:a9:af:f5:ef:da:c1:95:b1:d6:1f: 7c:f8:f9:71:40:ba:9d:f7:30:c9:e6:ac:f6:84:8a: 91:9e:6b:a3:45:fd:f6:3c:60:9a:06:ff:d0:04:ce: ee:0b:37:19:d4:b5:c3:8f:3f:b2:41:fd:43:37:bc: 3d:39:3a:ce:04:cf:7b:bd:de:97:11:08:e6:5f:e3: 7d:ed:f6:c6:e4:14:c2:48:44:3a:ea:95:c9:5a:88: b8:89:c2:3c:19:39:bd:da:23:09:11:66:b4:da:7f: 30:66:79:96:df:fc:69:c3:d6:c1:5f:a1:ce:db:0e: 7f:d7:ab:bc:5b:78:3f:b0:b5:73:9f:28:33:56:fc: e0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:45:2B:BE:43:AF:EB:81:E0:AC:A7:2C:A9:78:2A:08:32:C9:5B:F5 X509v3 Authority Key Identifier: keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:18:4d:5c:5f:d4:12:c0:3b:f9:92:bf:23:5f:6a:2d:a1:f2: d8:6a:7f:0d:62:0b:3f:36:c2:83:51:b4:7c:2c:6a:61:93:51: 0b:03:96:24:c3:70:64:8d:6f:ed:6b:3d:b3:ab:5e:7f:b5:fb: 11:39:e7:30:6d:99:e2:32:8f:0b:51:71:18:fd:9e:58:d4:71: eb:0f:c1:d7:ab:1a:42:d1:02:96:b6:41:38:12:f4:76:6f:1b: 26:ea:8e:63:d2:8c:14:da:b9:55:49:90:35:74:d9:d2:43:35: 20:31:9c:d6:d8:eb:8f:5e:83:d9:9a:77:56:9d:ad:ee:a3:6f: 8f:7d:20:3f:c0:95:32:58:d9:28:91:24:b0:15:29:64:33:91: 19:88:fd:14:10:7d:5f:96:25:69:94:25:b0:7c:1b:50:92:d5: c8:57:83:25:19:f1:81:48:5b:16:79:34:eb:24:3a:eb:de:14: 3a:4b:7f:22:33:cb:00:7a:f4:fd:13:9a:2a:ac:18:db:ba:b4: 83:88:66:86:d2:cd:1e:02:a8:0b:32:f2:1f:28:ee:bc:ef:77: 22:df:b9:43:d6:ae:f4:b9:b5:ff:fd:74:61:bc:ee:be:41:7a: 94:cb:38:62:b4:2a:2f:4e:23:35:88:e4:9a:6c:a1:6c:dc:29: b5:fb:0e:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc4QUYxMTAvBgNVBAUTKDc0QjFGQzZDQ0MyNzc3NURFRDFGNTk1MjVCMjg3NjYx QzhCRkVBMjgwHhcNMjUwOTE4MjI0MjIxWhcNMjUwOTI1MjI0MjIxWjAYMRYwFAYD VQQDEw02OGNjOGFjZC0yNDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhm3M6YxBA8/TBUgqe/0nxRnZjiq5ezy+RoUbSrvan0VNYWqQ2R/AV0RKrKT Tqqydc7BZscPdc9BErcbC6JwXGFbTtDsd7d2BWOTT5fFFirZmOoKZtSehUQNh0Xo LqOvnVPsf7v0BnQ7Ubv5lCiAKRKfRthWXI8Gh7+6iKmv9e/awZWx1h98+PlxQLqd 9zDJ5qz2hIqRnmujRf32PGCaBv/QBM7uCzcZ1LXDjz+yQf1DN7w9OTrOBM97vd6X EQjmX+N97fbG5BTCSEQ66pXJWoi4icI8GTm92iMJEWa02n8wZnmW3/xpw9bBX6HO 2w5/16u8W3g/sLVznygzVvzgfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpFK75D r+uB4KynLKl4KggyyVv1MB8GA1UdIwQYMBaAFHSx/GzMJ3dd7R9ZUlsodmHIv+oo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhBRi8xNkJCRDdCNDhE MTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQxM3RIMWxTV3loMlljaV82 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RMSDhiTXduZDEzdEgxbFNXeWgyWWNpXzZpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzhBRi8xNkJCRDdCNDhEMTMxMUVCQTUxODNEMEJDNEY5QUUwMi9kTEg4Yk13bmQx M3RIMWxTV3loMlljaV82aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAGE1cX9QSwDv5kr8jX2otofLYan8NYgs/NsKDUbR8LGphk1ELA5Yk w3BkjW/taz2zq15/tfsROecwbZniMo8LUXEY/Z5Y1HHrD8HXqxpC0QKWtkE4EvR2 bxsm6o5j0owU2rlVSZA1dNnSQzUgMZzW2OuPXoPZmndWna3uo2+PfSA/wJUyWNko kSSwFSlkM5EZiP0UEH1fliVplCWwfBtQktXIV4MlGfGBSFsWeTTrJDrr3hQ6S38i M8sAevT9E5oqrBjburSDiGaG0s0eAqgLMvIfKO6873ci37lD1q70ubX//XRhvO6+ QXqUyzhitCovTiM1iOSabKFs3Cm1+w4t -----END CERTIFICATE-----Generated at Fri Sep 19 03:57:06 2025 by rpki-client